---
id: CVE-2025-61913
title: >-
  Flowise is a drag & drop user interface to build a customized large language
  model flow
summary: >-
  Flowise is a drag & drop user interface to build a customized large language
  model flow. In versions prior to 3.0.8, WriteFileTool and ReadFileTool in
  Flowise do not restrict file path access, allowing authenticated attackers to
  exploit …
severity: critical
cvss: 9.9
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H'
cwe:
  - CWE-22
vendor: flowiseai
product: flowise
affected:
  - flowise < 3.0.8
patched:
  - flowise 3.0.8
published: '2025-10-08'
updated: '2026-09-30'
sourceUpdated: '2026-09-30T16:10:00.223'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-61913'
references:
  - url: >-
      https://github.com/FlowiseAI/Flowise/commit/1fb12cd93143592a18995f63b781d25b354d48a3
    label: security-advisories@github.com
  - url: 'https://github.com/FlowiseAI/Flowise/releases/tag/flowise%403.0.8'
    label: security-advisories@github.com
  - url: >-
      https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-j44m-5v8f-gc9c
    label: security-advisories@github.com
  - url: >-
      https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-jv9m-vf54-chjj
    label: security-advisories@github.com
  - url: >-
      https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-j44m-5v8f-gc9c
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
  - url: >-
      https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-jv9m-vf54-chjj
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
epss: 0.1295
epssPercentile: 0.96201
ingestedAt: '2026-09-30T17:13:20.714Z'
---

## Overview

Flowise is a drag & drop user interface to build a customized large language model flow. In versions prior to 3.0.8, WriteFileTool and ReadFileTool in Flowise do not restrict file path access, allowing authenticated attackers to exploit this vulnerability to read and write arbitrary files to any path in the file system, potentially leading to remote command execution. Flowise 3.0.8 fixes this vulnerability.

## Affected

- `flowise < 3.0.8`

## Remediation

Upgrade past the affected range:

- `flowise 3.0.8`